# CVEs published 2007-03-27 24 CVEs were published on March 27, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2006-7175](https://cve.now/CVE-2006-7175.md): The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not allow the administrator to disable SSLv2 encryp (no CVSS) - [CVE-2006-7176](https://cve.now/CVE-2006-7176.md): The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name (no CVSS) - [CVE-2007-1716](https://cve.now/CVE-2007-1716.md): pam\_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one us (no CVSS) - [CVE-2007-1712](https://cve.now/CVE-2007-1712.md): SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL com (no CVSS) - [CVE-2007-1713](https://cve.now/CVE-2007-1713.md): CRLF injection vulnerability in BSMTP.DLL in B21Soft BASP21 2003.0211, and BASP21 Pro 1.0.702.27 and earlier, allows remote attackers to inj (no CVSS) - [CVE-2007-1714](https://cve.now/CVE-2007-1714.md): Cross-site scripting (XSS) vulnerability in index.php in CcCounter 2.0 allows remote attackers to inject arbitrary web script or HTML via di (no CVSS) - [CVE-2007-1715](https://cve.now/CVE-2007-1715.md): PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary (no CVSS) - [CVE-2007-1695](https://cve.now/CVE-2007-1695.md): PHP remote file inclusion vulnerability in includes/usercp\_register.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP cod (no CVSS) - [CVE-2007-1696](https://cve.now/CVE-2007-1696.md): SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL comm (no CVSS) - [CVE-2007-1697](https://cve.now/CVE-2007-1697.md): PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2007-1698](https://cve.now/CVE-2007-1698.md): download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sensitive information v (no CVSS) - [CVE-2007-1699](https://cve.now/CVE-2007-1699.md): Multiple PHP remote file inclusion vulnerabilities in the SWmenu (com\_swmenupro and com\_swmenufree) 4.0 component for Mambo and Joomla! allo (no CVSS) - [CVE-2007-1700](https://cve.now/CVE-2007-1700.md): The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without consid (no CVSS) - [CVE-2007-1701](https://cve.now/CVE-2007-1701.md): PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register\_globals is enabled, allows context-dependent attackers to execute arbitrary code v (no CVSS) - [CVE-2007-1702](https://cve.now/CVE-2007-1702.md): PHP remote file inclusion vulnerability in mod\_flatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote attackers to execute (no CVSS) - [CVE-2007-1703](https://cve.now/CVE-2007-1703.md): SQL injection vulnerability in index.php in the RWCards (com\_rwcards) 2.4.3 and earlier component for Joomla! allows remote attackers to exe (no CVSS) - [CVE-2007-1704](https://cve.now/CVE-2007-1704.md): SQL injection vulnerability in index.php in the Car Manager (com\_resman) 1.1 and earlier component for Joomla! allows remote attackers to ex (no CVSS) - [CVE-2007-1705](https://cve.now/CVE-2007-1705.md): SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the catid paramet (no CVSS) - [CVE-2007-1706](https://cve.now/CVE-2007-1706.md): SQL injection vulnerability in eWebQuiz.asp in eWebQuiz 8 allows remote attackers to execute arbitrary SQL commands via the QuizID parameter (no CVSS) - [CVE-2007-1707](https://cve.now/CVE-2007-1707.md): PHP remote file inclusion vulnerability in index.php in Net Side Content Management System (Net-Side.net CMS) allows remote attackers to exe (no CVSS) - [CVE-2007-1708](https://cve.now/CVE-2007-1708.md): PHP remote file inclusion vulnerability in lib/db/ez\_sql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code vi (no CVSS) - [CVE-2007-1709](https://cve.now/CVE-2007-1709.md): Buffer overflow in the confirm\_phpdoc\_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows context-dependent attacker (no CVSS) - [CVE-2007-1710](https://cve.now/CVE-2007-1710.md): The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safe\_mode restrictions and read arbitrary (no CVSS) - [CVE-2007-1711](https://cve.now/CVE-2007-1711.md): Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwri (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-03-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.